Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
File: AYGCKpyioAj1zRG5-duhbuLGFFk.mft (raw, json)
Hash identifier: RVGiM2CpyzrfdbgX4CDyVZlops09LreBcd2lAJ45Gjo=
Subject key identifier: D3:D3:AD:12:BB:08:24:00:1A:C6:32:CD:23:48:C8:44:F5:B7:DE:42
Authority key identifier: 01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
Certificate issuer: /CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Certificate serial: 019E9C6054973CA21ED16EC7846A6DD4F7F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
Manifest number: 048D
Signing time: Sat 06 Jun 2026 10:00:19 +0000
Manifest this update: Sat 06 Jun 2026 10:00:19 +0000
Manifest next update: Sun 07 Jun 2026 10:00:19 +0000
Files and hashes: 1: AYGCKpyioAj1zRG5-duhbuLGFFk.crl (hash: 2cgTX+6hbxIZrrORS4zPzmlAgJsjTcQfUKYhDr8soHA=)
2: Ys_4DR1wULGBNA_eDYgXZEWOD2Q.roa (hash: qjKc7M+pEY0qhXBmrNC0EBe740v+5vXbrYaxAIWy74Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:60:54:97:3c:a2:1e:d1:6e:c7:84:6a:6d:d4:f7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Validity
Not Before: Jun 6 10:00:19 2026 GMT
Not After : Jun 7 10:00:19 2026 GMT
Subject: CN=d3d3ad12bb0824001ac632cd2348c844f5b7de42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c2:9f:10:53:00:32:7d:ef:a3:b4:58:ef:e6:
95:6c:b6:70:d7:e3:86:dd:46:32:46:ec:e3:ee:eb:
f6:fd:5c:ed:b7:ec:ce:00:60:93:79:31:5e:01:96:
ef:d5:06:15:ed:2c:c3:83:be:f1:6e:88:ff:1c:57:
ef:68:b2:ba:0c:8c:9a:04:c8:ea:60:03:8e:38:d7:
16:d5:b2:dc:81:a6:ed:9e:bc:b5:ec:54:c3:b3:a4:
da:93:0e:40:4a:d1:dc:9f:62:a7:56:1d:f1:49:f5:
8f:c4:ad:1d:08:5c:8d:86:ec:c4:37:7b:59:5d:52:
3c:44:ba:f0:2b:97:19:26:06:d0:9d:d4:eb:71:95:
cc:73:27:4b:40:1f:51:a3:36:1e:d5:b1:7c:2f:3c:
c6:26:21:00:9c:74:e4:62:23:3f:c3:1f:86:ca:c2:
65:59:00:a2:ae:45:9c:c3:e7:3d:11:c6:ef:d8:99:
e9:9c:3c:ba:5b:3a:f5:16:20:9f:bb:2d:39:b6:93:
4e:9f:d9:12:dc:4b:d2:ae:ab:e1:6c:05:0d:e5:d1:
a9:ec:f9:c6:28:24:53:f3:79:11:5c:09:75:15:ff:
28:4c:c0:7a:0d:92:53:70:6a:01:cc:07:4c:49:af:
0b:b0:4e:37:0f:a6:ec:85:ac:6f:e2:d4:e3:e4:8b:
58:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D3:AD:12:BB:08:24:00:1A:C6:32:CD:23:48:C8:44:F5:B7:DE:42
X509v3 Authority Key Identifier:
keyid:01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:34:6d:a8:89:22:7c:4c:8a:60:44:ce:d8:56:ff:22:07:f0:
bd:c6:82:c5:37:97:42:73:d2:9c:45:ff:40:88:c2:5a:cb:0c:
83:d5:cb:07:43:38:2f:e9:70:74:ed:44:72:00:dc:e8:b7:2a:
c2:4a:81:8e:4f:7d:fb:11:23:d7:3b:b6:81:95:0b:e6:ec:16:
7b:65:0c:88:3c:9e:4e:d8:91:be:2f:9b:fb:b7:b5:6b:f7:e1:
88:a3:e7:13:aa:41:c1:b8:f3:89:5f:75:91:e1:8d:7c:f7:69:
73:4a:60:0a:1e:64:1b:eb:02:e3:85:26:90:17:4c:d6:73:a8:
f8:11:8e:52:14:aa:93:fb:b1:7f:24:62:c3:9d:03:df:9b:ec:
6c:29:a4:88:fd:6a:7f:79:39:f8:c3:88:fe:aa:3d:ab:78:e7:
b0:a3:18:b2:6a:82:76:87:31:f8:b3:6a:41:b3:95:19:1e:14:
57:2b:72:20:e6:70:2f:00:04:1b:25:9c:c6:1b:6d:18:07:6e:
a2:04:8a:82:79:e5:94:ed:99:6d:8f:7e:a5:92:f1:a4:9b:c3:
e4:f5:33:05:ec:e8:f3:02:d5:f4:4d:b8:a6:ab:d3:86:77:b6:
f2:f3:2d:05:4f:81:0e:51:c1:c2:87:5f:13:1f:8c:5d:91:1b:
0e:08:96:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 19:26:27 2026 by rpki-client